Directory traversal vulnerable example

SUBMITTED BY: Guest

DATE: May 30, 2013, 3:54 a.m.

FORMAT: PHP

SIZE: 307 Bytes

Raw Download

HITS: 283051

Report

<?
$id = $_GET['archivo'];

$enlace = "admin/imagenes_galeria/".$id;
$rest = substr($id, -3);  
header ("Content-Disposition: attachment; filename=".$id);
header ("Content-Type: image/$rest");
header ("Content-Length: ".filesize($enlace));
readfile($enlace);

?> 